AC-04(09) Human Reviews
Enforce the use of human reviews for ac-04.09_odp.01 under the following conditions: ac-04.09_odp.02.
| Parameter ID | Definition |
|---|---|
| ac-04.09_odp.01 | information flows |
| ac-04.09_odp.02 | conditions |
Baselines
- L
- M
- H
- P
Guidance
Organizations define security or privacy policy filters for all situations where automated flow control decisions are possible. When a fully automated flow control decision is not possible, then a human review may be employed in lieu of or as a complement to automated security or privacy policy filtering. Human reviews may also be employed as deemed necessary by organizations.